Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
File: LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft (raw, json)
Hash identifier: Nkx74e7a+/8uQzhK3s0hecKwZV/K0d78kEHbJHLXRIk=
Subject key identifier: 72:7D:C9:91:58:F6:14:13:0F:6E:C9:92:12:78:BB:DF:D4:DF:9C:C1
Authority key identifier: 2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0
Certificate issuer: /CN=2d0d62129d02063d409ebfb01c648d46f34889e0
Certificate serial: 01988A32B4C1BA7A4606A25409C57C00E813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
Manifest number: 0614
Signing time: Fri 08 Aug 2025 15:00:35 +0000
Manifest this update: Fri 08 Aug 2025 15:00:35 +0000
Manifest next update: Sat 09 Aug 2025 15:00:35 +0000
Files and hashes: 1: CW_LnyX1zugkzNOIUd8XzpBN5Bw.roa (hash: fnDAooAgubqCaqW4AjdSJ+J1ErpgOuY9lVFJ+sN2CYg=)
2: LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl (hash: 1yeBhuvoe9vLAZbFjciViwN9CPwx++m5DjoY2lUKBNk=)
3: eQf0fzT1TpCrCtQpX64ANEQyzhI.roa (hash: HlHU7MK+aLw3ArQHYGvb135KcLlwl9X+zO2+NofGyyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 15:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:32:b4:c1:ba:7a:46:06:a2:54:09:c5:7c:00:e8:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d0d62129d02063d409ebfb01c648d46f34889e0
Validity
Not Before: Aug 8 15:00:35 2025 GMT
Not After : Aug 9 15:00:35 2025 GMT
Subject: CN=727dc99158f614130f6ec9921278bbdfd4df9cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8b:5d:0a:9b:92:40:37:60:b3:e6:06:57:2f:
4a:b9:dc:7d:2f:54:d0:94:ab:75:c1:d3:b1:b3:13:
fe:e0:bf:38:a0:2a:ae:b9:fb:d0:32:16:9b:37:31:
82:78:9e:c7:fd:b1:da:b0:11:ca:af:d9:3b:06:08:
2d:61:c1:2c:45:9e:8f:45:89:7e:0a:33:fe:a0:68:
ee:ca:c5:20:1a:29:92:b2:00:5a:2b:f7:72:0d:e9:
3d:1b:19:6a:7b:e3:7b:b9:08:78:d4:7c:b1:8e:99:
ed:58:18:23:2b:2a:21:c3:18:16:ae:39:f0:b7:fa:
ab:3c:7a:9e:2e:24:02:b0:e7:44:99:5d:2d:fa:fc:
64:1d:5f:83:46:4e:99:bf:0e:e5:f5:54:2e:42:48:
59:28:20:02:1a:c0:20:fb:2f:80:93:e8:cf:a3:0f:
7c:fa:60:45:81:84:8a:51:c8:84:c3:8f:af:90:4a:
49:f9:c5:1c:fe:50:45:e4:bc:05:c6:b1:d4:d1:a0:
37:89:d0:02:60:7d:ef:4f:81:04:ba:ac:40:6e:d0:
e8:a1:ff:6f:a2:be:0a:c4:6e:fb:bd:cb:81:28:4d:
78:e3:9b:f1:50:24:75:db:89:59:60:8e:c5:13:a1:
8f:a2:23:b1:5b:f7:b7:d4:0c:68:09:69:9c:01:77:
a2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:7D:C9:91:58:F6:14:13:0F:6E:C9:92:12:78:BB:DF:D4:DF:9C:C1
X509v3 Authority Key Identifier:
keyid:2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:80:0e:fb:10:46:fb:4b:97:73:31:07:aa:d1:f5:0a:76:04:
fe:ec:b9:35:77:fd:07:4b:fe:77:26:b5:86:ae:b6:47:04:8c:
75:c1:fd:3b:61:0d:71:af:98:d7:8e:23:eb:e8:19:74:23:cc:
d4:05:3b:d7:2d:39:12:60:b1:07:c1:c5:b0:60:7a:04:86:53:
c0:e8:35:49:42:72:00:7a:90:39:bf:0f:48:fb:3d:c0:f2:1d:
94:6a:67:86:b5:6e:ac:1f:69:c4:05:d5:d9:4c:7e:2b:70:f7:
92:6f:6a:9f:74:ce:d6:4f:9c:f7:55:cc:c5:4e:78:31:6f:f7:
cc:90:d6:27:5a:c0:1a:4e:fc:63:1e:f6:4c:68:86:ad:7d:08:
6e:90:e8:36:77:d6:7e:5d:aa:ae:27:3c:0b:3c:99:19:f7:fc:
e2:32:bc:16:b0:fb:3c:29:d8:8b:11:6e:83:f0:a3:bf:67:f3:
04:7b:17:03:fc:90:1e:88:7e:63:e8:8f:07:25:c0:91:85:25:
a5:b8:e8:c3:db:db:ce:cb:71:bd:bd:d1:a6:4e:65:4b:99:7f:
2b:e0:b1:f9:5a:88:79:2d:74:80:d4:1e:86:91:ff:25:7e:0b:
46:41:14:c1:2a:87:e2:30:fb:b3:c5:da:a1:9d:8b:91:06:02:
e9:42:20:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:45 2025 by rpki-client